Privacy Policy

1. Who is responsible for your data

Survived (“Survived,” “we,” “us”) is operated by [LEGAL REVIEW: insert company legal name], registered at [LEGAL REVIEW: insert registered address]. We are the data controller for the personal data described in this policy. The Service is offered globally, including to individuals in the European Economic Area (“EEA”) and the United Kingdom, so this policy is written to align with the principles of the EU/UK General Data Protection Regulation (“GDPR”) and, where applicable, the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”), in addition to other data protection law that may apply to you.

For users in the EEA or UK, we have appointed [LEGAL REVIEW: insert EU/UK Article 27 representative, if required at your processing scale] as our representative, who can be contacted on matters relating to the processing of your personal data.

2. Beta service

Survived is currently offered as a beta, early-access product, free of charge for both developers and companies. We do not currently charge either side for any part of the Service. How we process your data may evolve as the Service develops; we will update this policy and notify you of material changes as described in Section 12.

3. Information we collect

• Professional profile fields: role, industry, and years of experience.
• Your LinkedIn profile URL, email address, and phone number.
• Your selected multiple-choice responses to assessment questions.
• Voice recordings of your assessment answers and their technical metadata (duration, file type, upload status).
• Invitation, assessment session, consent, and security/audit logs.
• Any support communications or correspondence with us.

Your voice recordings may, depending on how they are processed, constitute biometric or other special category data under GDPR Article 9 or sensitive personal data under the UAE PDPL. We do not use your recordings for voice-based identification or verification, and our AI-assisted processing is used only to understand the content of what you say, not to extract a biometric identifier. Where applicable law treats this processing as sensitive, we rely on your explicit consent (see Section 4) as the basis for it.

4. Why we process this information, and our legal basis

• To create and manage your candidate profile (performance of a contract with you).
• To send and validate assessment invitations (performance of a contract with you).
• To run the assessment, process your responses with our AI models, and securely store your results (performance of a contract with you; explicit consent for voice/sensitive processing).
• To review candidates and identify relevant hiring opportunities (performance of a contract with you).
• To share a profile summary with prospective employers and facilitate introductions or interviews, only where you have given the applicable consent (consent). We do not share your voice recordings or full responses with employers.
• To maintain security, prevent abuse, and comply with legal obligations (legal obligation; our legitimate interests in keeping the Service secure).
• To produce aggregated or properly anonymized analytics and commercial industry insights, including for sale to companies, where re-identification is not reasonably likely (our legitimate interests, and/or consent where required by law; true anonymization means this activity falls outside the scope of “personal data” once completed).

5. Who we share information with

We share information only with: authorized Survived personnel who need it to operate the Service; our hosting, database, and object storage providers; our email delivery provider; and prospective hiring companies, but only a profile summary (never your voice recordings or full responses), and only where you’ve consented to talent discovery. Interview coordination, when applicable, is facilitated by Survived. Your profile is not made publicly searchable by default.

6. Our commercial model, and anonymized industry insights

During the current beta, we do not charge developers or companies for any part of the Service. We intend to generate revenue in the future through fees paid by companies to connect with developers whose experience matches their needs, and through anonymized or aggregated industry insights products sold to companies, drawn from developers’ experience with names and other directly identifying details removed. We do not sell your identifiable personal data, your identity, or your voice recordings. Where we use or sell anonymized or aggregated data, we take reasonable steps to ensure re-identification of any individual is not reasonably likely before doing so. Developers are never charged for any part of the Service.

7. Automated processing

We use AI-assisted tools to help process your profile and assessment responses and to help identify potential matches with companies. A human remains involved in decisions that materially affect you, such as which developers are put forward to a specific company; we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human involvement.

8. Retention and deletion

We retain your profile and assessment data for as long as your account is active, and for up to 24 months after your last activity on the Service, after which it is deleted or fully anonymized unless you ask us to delete it sooner or applicable law requires us to keep it longer. You may request access to, correction of, deletion of, or withdrawal of consent for your data at any time by contacting us (see Section 13). If you withdraw talent-sharing consent, we will stop sharing your profile summary with prospective employers going forward; we may retain a minimal record of the withdrawal itself and any legally required records as described in [LEGAL REVIEW: insert jurisdiction-specific mandatory retention exceptions].

9. Security and international transfers

Voice recordings are stored in private object storage and are only accessible to authorized Survived personnel, through short-lived, signed URLs; they are never made accessible to employers. We apply least-privilege access controls, encrypt data in transit, and audit administrative access to candidate records. Survived and our infrastructure providers may operate from multiple countries, so your data may be transferred to and processed in a country that your home jurisdiction does not consider to offer an equivalent level of data protection. Where we transfer personal data out of the EEA or UK, we rely on an appropriate safeguard recognized under GDPR, such as the European Commission’s Standard Contractual Clauses (or the UK International Data Transfer Addendum), with our processors and sub-processors.

10. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Correct inaccurate or incomplete personal data.
• Request erasure of your personal data (the “right to be forgotten”).
• Restrict or object to certain processing, including processing based on our legitimate interests.
• Receive your data in a portable, machine-readable format, or have it transferred directly to another provider where technically feasible.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (see Section 7).
• Lodge a complaint with your local data protection supervisory authority (for example, your EEA member state’s authority, the UK Information Commissioner’s Office, or the UAE Data Office), without prejudice to any other administrative or judicial remedy.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframe required by applicable law (for example, one month under GDPR, extendable in complex cases).

11. Children’s privacy

The Service is intended for individuals who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time, including as the Service moves beyond beta. Material changes will be communicated before they take effect where required by law. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact us

To exercise any of the rights above or ask a question about this policy, contact [LEGAL REVIEW: insert privacy contact email/address]. Where required by applicable law based on our scale or nature of processing, we will appoint a Data Protection Officer; until then, privacy inquiries should be directed to the contact above.